Read the docs

deltaww

Records313All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical90CVSS 9.0–10.0
CVSS high192CVSS 7.0–8.9

Exploited now

deltaww records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

25 records in Dopsoft · all components

Priority CRITICAL 93KEV

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.76428 Published 2021-09-17 No fix listed CWE-787
Priority MEDIUM 46

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0712 Published 2021-09-17 No fix listed CWE-121
Priority MEDIUM 42

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00986 Published 2024-01-18 No fix listed CWE-119
TI-2020-16599 CVE-2020-27275 · GHSA-734r-xc2j-r7m7

Out-of-bounds write in Delta Electronics

Priority MEDIUM 40

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0339 Published 2021-01-11 No fix listed CWE-787
Priority LOW 39

A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02505 Published 2021-08-30 No fix listed CWE-121
Priority LOW 38

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01036 Published 2021-09-17 No fix listed CWE-122
Priority LOW 38

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0228 Published 2021-01-11 No fix listed CWE-822
Priority LOW 36

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0039 Published 2024-02-29 Fixed in v4.0.0.82 CWE-427
Priority LOW 36

Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0023 Published 2023-09-07 Fixed in v4.0.0.82 CWE-121
TI-2023-00119 CVE-2023-0124 · GHSA-pmvm-84q3-vhx6

Out-of-bounds write in deltaww DOPSoft

Priority LOW 36

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00241 Published 2023-02-02 No fix listed CWE-787
Priority LOW 36

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the softwar…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00245 Published 2023-02-02 No fix listed CWE-121
Priority LOW 36

Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-07-02 No fix listed CWE-125
Priority LOW 34

Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00365 Published 2023-12-04 No fix listed CWE-121
Priority LOW 33

Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00379 Published 2022-12-16 No fix listed CWE-125
Priority LOW 26

Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to disclose information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00736 Published 2021-07-02 No fix listed CWE-125
Open these records in search →